update.ms-office.app
Classification: Malicious
update.ms-office.app is a malicious hostname. Linked to Sidewinder activity. 62 sightings from ThreatFox Abuse.ch, last seen 2025-01-07.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:37:00.
MITRE ATT&CK associations
Intrusion sets: SIDEWINDER (G0121)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SideWinder | ThreatFox Abuse.ch | 2024-12-13 14:17:45 | 2025-01-07 14:20:04 | malicious-activity | G0121 Sidewinder |
Tags
apt sidewinderIP addresses resolved by this hostname
- 2600:1900:4001:96e:8000:1:e2f4:45ea (2026-10-18 00:37:00)
- 34.41.139.193 (2026-10-18 00:37:00)
Whois information
- Domain
- ms-office.app
- TLD
- app
- First indexed
- 2024-12-13 14:17:45
- Last updated
- 2026-10-18 00:37:00